Skip to content

Actions: profullstack/qryptchat-web

Actions

threatcrush security scan

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
threatcrush-scan.yml
25 workflow runs
25 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix(ui): hide the feedback FAB on chat routes threatcrush security scan #25: Pull request #258 opened by ralyodio
29s worktree-hide-feedback-on-chat
worktree-hide-feedback-on-chat
29s
feat(settings): add encrypted key download to settings threatcrush security scan #24: Pull request #257 opened by ralyodio
31s worktree-key-export-ui
worktree-key-export-ui
31s
fix(crypto): stop republishing the public key on every login threatcrush security scan #23: Pull request #256 opened by ralyodio
35s fix/key-sync-overwrite
fix/key-sync-overwrite
35s
fix(db): restore message sending, broken by the SECURITY DEFINER revoke sweep threatcrush security scan #22: Pull request #255 opened by ralyodio
29s hotfix/message-send-permission
hotfix/message-send-permission
29s
fix(security): close conversation hijacking, profile mass assignment, avatar MIME trust threatcrush security scan #21: Pull request #254 opened by ralyodio
34s fix/security-advisories-wave3
fix/security-advisories-wave3
34s
fix(db): make the wave-2 policy migration idempotent against production threatcrush security scan #20: Pull request #253 opened by ralyodio
33s fix/migration-idempotent-policies
fix/migration-idempotent-policies
33s
fix(security): close the wave-2 advisories (RLS, XSS sink, token exposure, KDFs) threatcrush security scan #19: Pull request #252 opened by ralyodio
31s fix/security-advisories-wave2
fix/security-advisories-wave2
31s
chore(db): align the drop migration filename with the applied prod version threatcrush security scan #18: Pull request #251 opened by ralyodio
35s chore/align-drop-migration-version
chore/align-drop-migration-version
35s
fix(security): scope cleanup endpoints and harden backup PIN storage threatcrush security scan #17: Pull request #250 synchronize by ralyodio
33s fix/security-advisories-2026-08
fix/security-advisories-2026-08
33s
fix(security): scope cleanup endpoints and harden backup PIN storage threatcrush security scan #16: Pull request #250 opened by ralyodio
34s fix/security-advisories-2026-08
fix/security-advisories-2026-08
34s
fix(security): harden log_sms_notification and move SMS path to service role threatcrush security scan #15: Pull request #249 opened by ralyodio
35s security/sms-notification-hardening
security/sms-notification-hardening
35s
fix(security): bind the remaining IDOR-able RPCs to auth.uid() threatcrush security scan #14: Pull request #248 opened by ralyodio
36s security/bind-remaining-idors
security/bind-remaining-idors
36s
fix(security): revoke anon EXECUTE on the remaining 41 SECURITY DEFINER fns threatcrush security scan #13: Pull request #247 opened by ralyodio
38s security/sweep-remaining-secdef
security/sweep-remaining-secdef
38s
fix(db): drop the duplicated 20260814 migration files threatcrush security scan #12: Pull request #246 opened by ralyodio
35s fix/remove-duplicate-migrations
fix/remove-duplicate-migrations
35s
chore(db): align migration filenames with the applied prod versions threatcrush security scan #11: Pull request #245 opened by ralyodio
30s chore/align-migration-versions
chore/align-migration-versions
30s
fix(security): revoke anon RPC access, bind RPCs to auth.uid(), version RLS drift threatcrush security scan #10: Pull request #244 opened by ralyodio
35s security/remediation-steps-1-3
security/remediation-steps-1-3
35s
docs: archive the Noir0x63 security audit and its verification threatcrush security scan #9: Pull request #243 opened by ralyodio
36s worktree-docs-security-audit
worktree-docs-security-audit
36s
fix(settings): reject malformed retention JSON threatcrush security scan #8: Pull request #242 opened by rissrice2105-agent
28s rissrice2105-agent:fix/qryptchat-fifth-audit
rissrice2105-agent:fix/qryptchat-fifth-audit
28s
fix(groups): resolve internal user before listing threatcrush security scan #7: Pull request #240 opened by rissrice2105-agent
29s rissrice2105-agent:fix/group-list-internal-user-id
rissrice2105-agent:fix/group-list-internal-user-id
29s
fix(pwa): give maskable icons a real background and safe zone threatcrush security scan #6: Pull request #239 opened by ralyodio
35s worktree-maskable-icons
worktree-maskable-icons
35s
Fix profile validation for falsy non-string fields threatcrush security scan #5: Pull request #238 opened by rissrice2105-agent
36s rissrice2105-agent:fix/qryptchat-next-audit
rissrice2105-agent:fix/qryptchat-next-audit
36s
Icon pipeline → public/, delete static/, and run vitest in CI threatcrush security scan #4: Pull request #236 opened by ralyodio
49s worktree-icon-pipeline-and-ci
worktree-icon-pipeline-and-ci
49s
fix(pwa): restore installability lost in the Next.js migration threatcrush security scan #3: Pull request #235 opened by ralyodio
32s worktree-pwa-install-fix
worktree-pwa-install-fix
32s
fix(conversations): preserve two-member groups threatcrush security scan #2: Pull request #234 opened by rissrice2105-agent
30s rissrice2105-agent:fix/two-member-group-delete
rissrice2105-agent:fix/two-member-group-delete
30s
ci: add ThreatCrush security scan threatcrush security scan #1: Pull request #231 opened by ralyodio
34s chore/threatcrush-scan
chore/threatcrush-scan
34s